{"id":"https://openalex.org/W1974837338","doi":"https://doi.org/10.1145/2660267.2660341","title":"Decide Now or Decide Later?","display_name":"Decide Now or Decide Later?","publication_year":2014,"publication_date":"2014-11-03","ids":{"openalex":"https://openalex.org/W1974837338","doi":"https://doi.org/10.1145/2660267.2660341","mag":"1974837338"},"language":"en","primary_location":{"id":"doi:10.1145/2660267.2660341","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2660267.2660341","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5058407280","display_name":"Wen Zhang","orcid":"https://orcid.org/0000-0001-5854-7592"},"institutions":[{"id":"https://openalex.org/I200719446","display_name":"Vanderbilt University","ror":"https://ror.org/02vm5rt34","country_code":"US","type":"education","lineage":["https://openalex.org/I200719446"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Wen Zhang","raw_affiliation_strings":["Vanderbilt University, Nashville, TN, USA"],"affiliations":[{"raw_affiliation_string":"Vanderbilt University, Nashville, TN, USA","institution_ids":["https://openalex.org/I200719446"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100714052","display_name":"You Chen","orcid":"https://orcid.org/0000-0001-8232-8840"},"institutions":[{"id":"https://openalex.org/I200719446","display_name":"Vanderbilt University","ror":"https://ror.org/02vm5rt34","country_code":"US","type":"education","lineage":["https://openalex.org/I200719446"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"You Chen","raw_affiliation_strings":["Vanderbilt University, Nashville, TN, USA"],"affiliations":[{"raw_affiliation_string":"Vanderbilt University, Nashville, TN, USA","institution_ids":["https://openalex.org/I200719446"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078437281","display_name":"Thaddeus R. Cybulski","orcid":"https://orcid.org/0000-0003-0613-7617"},"institutions":[{"id":"https://openalex.org/I111979921","display_name":"Northwestern University","ror":"https://ror.org/000e0be47","country_code":"US","type":"education","lineage":["https://openalex.org/I111979921"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Thaddeus Cybulski","raw_affiliation_strings":["Northwestern University, Chicago, IL, USA","Northwestern University, Chicago IL, USA"],"affiliations":[{"raw_affiliation_string":"Northwestern University, Chicago, IL, USA","institution_ids":["https://openalex.org/I111979921"]},{"raw_affiliation_string":"Northwestern University, Chicago IL, USA","institution_ids":["https://openalex.org/I111979921"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029954233","display_name":"Daniel Fabbri","orcid":"https://orcid.org/0000-0003-0530-2510"},"institutions":[{"id":"https://openalex.org/I200719446","display_name":"Vanderbilt University","ror":"https://ror.org/02vm5rt34","country_code":"US","type":"education","lineage":["https://openalex.org/I200719446"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daniel Fabbri","raw_affiliation_strings":["Vanderbilt University, Nashville, TN, USA"],"affiliations":[{"raw_affiliation_string":"Vanderbilt University, Nashville, TN, USA","institution_ids":["https://openalex.org/I200719446"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031954035","display_name":"Carl A. Gunter","orcid":"https://orcid.org/0009-0006-6943-0684"},"institutions":[{"id":"https://openalex.org/I2801919071","display_name":"University of Illinois System","ror":"https://ror.org/05e94g991","country_code":"US","type":"education","lineage":["https://openalex.org/I2801919071"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Carl Gunter","raw_affiliation_strings":["University of Illinois, Urbana, IL, USA","University of Illinois Urbana, IL, USA"],"affiliations":[{"raw_affiliation_string":"University of Illinois, Urbana, IL, USA","institution_ids":["https://openalex.org/I2801919071"]},{"raw_affiliation_string":"University of Illinois Urbana, IL, USA","institution_ids":["https://openalex.org/I2801919071"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084016923","display_name":"Patrick N. Lawlor","orcid":"https://orcid.org/0000-0001-7621-3254"},"institutions":[{"id":"https://openalex.org/I111979921","display_name":"Northwestern University","ror":"https://ror.org/000e0be47","country_code":"US","type":"education","lineage":["https://openalex.org/I111979921"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Patrick Lawlor","raw_affiliation_strings":["Northwestern University, Chicago, IL, USA","Northwestern University, Chicago IL, USA"],"affiliations":[{"raw_affiliation_string":"Northwestern University, Chicago, IL, USA","institution_ids":["https://openalex.org/I111979921"]},{"raw_affiliation_string":"Northwestern University, Chicago IL, USA","institution_ids":["https://openalex.org/I111979921"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050508920","display_name":"David Liebovitz","orcid":"https://orcid.org/0000-0002-2518-5940"},"institutions":[{"id":"https://openalex.org/I111979921","display_name":"Northwestern University","ror":"https://ror.org/000e0be47","country_code":"US","type":"education","lineage":["https://openalex.org/I111979921"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David Liebovitz","raw_affiliation_strings":["Northwestern University, Chicago, IL, USA","Northwestern University, Chicago IL, USA"],"affiliations":[{"raw_affiliation_string":"Northwestern University, Chicago, IL, USA","institution_ids":["https://openalex.org/I111979921"]},{"raw_affiliation_string":"Northwestern University, Chicago IL, USA","institution_ids":["https://openalex.org/I111979921"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090647314","display_name":"Bradley Malin","orcid":"https://orcid.org/0000-0003-3040-5175"},"institutions":[{"id":"https://openalex.org/I200719446","display_name":"Vanderbilt University","ror":"https://ror.org/02vm5rt34","country_code":"US","type":"education","lineage":["https://openalex.org/I200719446"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Bradley Malin","raw_affiliation_strings":["Vanderbilt University, Nashville, TN, USA"],"affiliations":[{"raw_affiliation_string":"Vanderbilt University, Nashville, TN, USA","institution_ids":["https://openalex.org/I200719446"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5058407280"],"corresponding_institution_ids":["https://openalex.org/I200719446"],"apc_list":null,"apc_paid":null,"fwci":0.818,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.79558799,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"1182","last_page":"1192"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11652","display_name":"Imbalanced Data Classification Techniques","score":0.991599977016449,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11652","display_name":"Imbalanced Data Classification Techniques","score":0.991599977016449,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9740999937057495,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9365000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7965151071548462},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6315159797668457},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.5578972697257996},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5310360193252563},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.4878835678100586},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.48119574785232544},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4519044756889343},{"id":"https://openalex.org/keywords/operator","display_name":"Operator (biology)","score":0.42479178309440613},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.41605085134506226},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.33139437437057495},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3098292648792267},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.23930802941322327}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7965151071548462},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6315159797668457},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.5578972697257996},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5310360193252563},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.4878835678100586},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.48119574785232544},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4519044756889343},{"id":"https://openalex.org/C17020691","wikidata":"https://www.wikidata.org/wiki/Q139677","display_name":"Operator (biology)","level":5,"score":0.42479178309440613},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.41605085134506226},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33139437437057495},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3098292648792267},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.23930802941322327},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C86339819","wikidata":"https://www.wikidata.org/wiki/Q407384","display_name":"Transcription factor","level":3,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C158448853","wikidata":"https://www.wikidata.org/wiki/Q425218","display_name":"Repressor","level":4,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2660267.2660341","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2660267.2660341","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7900000214576721,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306085","display_name":"U.S. Department of Health and Human Services","ror":"https://ror.org/033jnv181"},{"id":"https://openalex.org/F4320332161","display_name":"National Institutes of Health","ror":"https://ror.org/01cwqze88"},{"id":"https://openalex.org/F4320332334","display_name":"Office of the National Coordinator for Health Information Technology","ror":"https://ror.org/02fm3sv87"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W89608058","https://openalex.org/W611330638","https://openalex.org/W1952056635","https://openalex.org/W1985987493","https://openalex.org/W2058347046","https://openalex.org/W2082554729","https://openalex.org/W2097712921","https://openalex.org/W2099053789","https://openalex.org/W2108287273","https://openalex.org/W2109943925","https://openalex.org/W2121034979","https://openalex.org/W2137959503","https://openalex.org/W2155653793","https://openalex.org/W2155822698","https://openalex.org/W2165956633","https://openalex.org/W2167793421","https://openalex.org/W2170913656","https://openalex.org/W2341759796","https://openalex.org/W2694313985","https://openalex.org/W2789825598","https://openalex.org/W4239578735"],"related_works":["https://openalex.org/W653900512","https://openalex.org/W1559280668","https://openalex.org/W3123347851","https://openalex.org/W574801755","https://openalex.org/W2161718263","https://openalex.org/W1510863280","https://openalex.org/W4381282255","https://openalex.org/W4390276866","https://openalex.org/W2347642088","https://openalex.org/W3150023697"],"abstract_inverted_index":{"One":[0],"of":[1,46,65,81,162,169,189,203,227,236],"the":[2,44,63,66,103,142,160,163,167,190,224],"greatest":[3],"challenges":[4],"an":[5,11,145],"organization":[6],"faces":[7],"is":[8,13,72,148],"determining":[9],"when":[10,100],"employee":[12],"permitted":[14],"to":[15,92,116,158],"utilize":[16],"a":[17,21,41,47,60,78,114,121,136,153,178,207],"certain":[18],"resource":[19],"in":[20,62],"system.":[22],"This":[23],"\"insider":[24],"threat\"":[25],"can":[26,219],"be":[27,106],"addressed":[28],"through":[29],"two":[30],"strategies:":[31],"i)":[32],"prospective":[33,228],"methods,":[34,52],"such":[35,53,186],"as":[36,54,187],"access":[37,146,201],"control,":[38],"that":[39,58,74,140,144],"make":[40,59],"decision":[42,61,231],"at":[43],"time":[45],"request,":[48],"and":[49,83,175,200,229],"ii)":[50],"retrospective":[51,230],"post":[55],"hoc":[56],"auditing,":[57],"light":[64],"knowledge":[67],"gathered":[68],"afterwards.":[69],"While":[70],"it":[71],"recognized":[73],"each":[75],"strategy":[76],"has":[77,86],"distinct":[79],"set":[80],"benefits":[82],"drawbacks,":[84],"there":[85],"been":[87],"little":[88],"investigation":[89],"into":[90,132],"how":[91,216],"provide":[93],"system":[94],"administrators":[95],"with":[96],"practical":[97],"guidance":[98],"on":[99,120,181],"one":[101],"or":[102],"other":[104],"should":[105],"applied.":[107],"To":[108],"address":[109],"this":[110],"problem,":[111],"we":[112,128,214],"introduce":[113,152],"framework":[115],"compare":[117,159],"these":[118,130],"strategies":[119,131],"common":[122],"quantitative":[123],"scale.":[124],"In":[125],"doing":[126],"so,":[127],"translate":[129],"classification":[133,164],"problems":[134],"using":[135],"context-based":[137],"feature":[138],"space":[139],"assesses":[141],"likelihood":[143],"request":[147],"legitimate.":[149],"We":[150],"then":[151],"technique":[154],"called":[155],"bispective":[156,217],"analysis":[157,184,188,218],"performance":[161],"models":[165],"under":[166],"situation":[168],"non-equivalent":[170],"costs":[171],"for":[172,233],"false":[173],"positive":[174],"negative":[176],"instances,":[177],"significant":[179],"extension":[180],"traditional":[182],"cost":[183,198],"techniques,":[185],"receiver":[191],"operator":[192],"characteristic":[193],"(ROC)":[194],"curve.":[195],"Using":[196],"domain-specific":[197],"estimates":[199],"logs":[202],"several":[204],"months":[205],"from":[206],"large":[208],"Electronic":[209],"Medical":[210],"Record":[211],"(EMR)":[212],"system,":[213],"demonstrate":[215],"support":[220],"meaningful":[221],"decisions":[222],"about":[223],"relative":[225],"merits":[226],"making":[232],"specific":[234],"types":[235],"hospital":[237],"personnel.":[238]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}